ENTITY GENERATES CERTIFICATE REQUEST 
CONTAINING: 
IDENTITY 
HOSTNAME 
PUBLIC KEY 
CLIENT NETWORK BLOCKS 
IP ADDRESS (OPTIONAL) 
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CERTIFICATE AUTHORITY VERIFIES CERTIFICATE 
REQUEST INFORMATION 
AND GENERATES CERTIFICATE 
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REQUESTING ENTITY 
INSTALLS CERTIFICATE ON 
VPN DEVICE AND 
CONFIGURES SECURITY 
POLICY 
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ON-LINE CERTIFICATE 
REPOSITORY AND 
REVOCATION LIST 
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